curl - cURL mirror with patches applied

Age	Commit message (Collapse)	Author
2014-08-03	gtls: only define Curl_gtls_seed if Nettle is not being used	Dan Fandrich

2014-07-30	vtls: make the random function mandatory in the TLS backend	Daniel Stenberg
	To force each backend implementation to really attempt to provide proper random. If a proper random function is missing, then we can explicitly make use of the default one we use when TLS support is missing. This commit makes sure it works for darwinssl, gnutls, nss and openssl.
2014-07-15	gnutls: fix compiler warning	Daniel Stenberg
	conversion to 'int' from 'long int' may alter its value
2014-07-14	gnutls: detect lack of SRP support in GnuTLS at run-time and try without	Dan Fandrich
	Reported-by: David Woodhouse
2014-07-14	gnutls: handle IP address in cert name check	David Woodhouse
	Before GnuTLS 3.3.6, the gnutls_x509_crt_check_hostname() function didn't actually check IP addresses in SubjectAltName, even though it was explicitly documented as doing so. So do it ourselves...
2014-07-13	gnutls: improved error message if setting cipher list fails	Dan Fandrich
	Reported-by: David Woodhouse
2014-07-12	gnutls: fixed a couple of uninitialized variable references	Dan Fandrich

2014-07-12	gnutls: fixed compilation against versions < 2.12.0	Dan Fandrich
	The AES-GCM ciphers were added to GnuTLS as late as ver. 3.0.1 but the code path in which they're referenced here is only ever used for somewhat older GnuTLS versions. This caused undeclared identifier errors when compiling against those.
2014-07-12	gnutls: explicitly added SRP to the priority string	Dan Fandrich
	This seems to have become necessary for SRP support to work starting with GnuTLS ver. 2.99.0. Since support for SRP was added to GnuTLS before the function that takes this priority string, there should be no issue with backward compatibility.
2014-07-11	gnutls: ignore invalid certificate dates with VERIFYPEER disabled	Dan Fandrich
	This makes the behaviour consistent with what happens if a date can be extracted from the certificate but is expired.
2014-05-28	gnutls: allow building with nghttp2 but without ALPN support	Daniel Stenberg
	It might not be the most useful combo, but...
2014-05-28	gnutls: don't use deprecated type names anymore	Alessandro Ghedini

2014-04-22	gtls: fix NULL pointer dereference	Daniel Stenberg
	gnutls_x509_crt_import() must not be called with a NULL certificate Bug: http://curl.haxx.se/mail/lib-2014-04/0145.html Reported-by: Damian Dixon
2014-03-31	http2: remove _DRAFT09 from the NPN_HTTP2 enum	Daniel Stenberg
	We're progressing throught drafts so there's no point in having a fixed one in a symbol that'll survive.
2014-02-11	gtls: honor --[no-]alpn command line switch	Fabian Frank
	Disable ALPN if requested by the user.
2014-02-04	gtls: add ALPN support	Fabian Frank
	Add ALPN support when using GnuTLS >= 3.2.0. This allows libcurl to negotiate HTTP/2.0 for https connections when built with GnuTLS. See: http://www.gnutls.org/manual/gnutls.html#Application-Layer-Protocol-Negotiation-_0028ALPN_0029 http://tools.ietf.org/html/draft-ietf-tls-applayerprotoneg-04
2014-01-20	disable GnuTLS insecure ciphers	Fabian Frank
	Make GnuTLS old and new consistent, specify the desired protocol, cipher and certificate type in always in both modes. Disable insecure ciphers as reported by howsmyssl.com. Honor not only --sslv3, but also the --tlsv1[.N] switches. Related Bug: http://curl.haxx.se/bug/view.cgi?id=1323
2014-01-19	gtls: fix compiler warnings on conversions size_t => unsigned int	Daniel Stenberg

2013-12-26	vtls: Updated comments referencing sslgen.c and ssluse.c	Steve Holme

2013-12-26	vtls: Fixed up include of vtls.h	Steve Holme

2013-12-20	vtls: moved all TLS/SSL source and header files into subdir	Daniel Stenberg